common operator - Search Language Test (oxiclean)
- search test: common operator through the UI.
comment splunk> start with '/'
open / (open the main interface)
comment Wait for server response 'completed'
waitForDispatchCompleted 5000
comment Change time line to 'All Time'
select //select[@id='timelineValues'] value=ALL_TIME
comment Clear search and hit report tab
type //textarea[@id='entry']
click //input[@id='entrySubmit'] (Click submit button)
comment Wait for server response 'completed'
waitForDispatchCompleted 10000
comment **** Common Simple Case (find common lines from everything)****
type //textarea[@id='entry'] index::sampledata | common _raw
click //input[@id='entrySubmit'] (Click submit button)
comment Wait for server response 'completed'
waitForDispatchCompleted 10000
verifyText //div[@id='r0']//pre *172.26.34.223*GET /trade/app*
verifyText //div[@id='r1']//pre *172.26.34.223*GET /trade/app*
verifyText //div[@id='r2']//pre *172.26.34.223*GET /trade/app*
verifyText //div[@id='r3']//pre *172.26.34.223*GET /trade/app*
verifyText //div[@id='r4']//pre *172.26.34.223*GET /trade/app*
comment **** common failure; simple case, no args ****
type //textarea[@id='entry'] index::_internal | common
click //input[@id='entrySubmit'] (Click submit button)
comment Expect and validate error notification due to missing args
waitForText //div[@id='msgNotificationContainer']//td[@class='ERROR'] Error*
verifyText //div[@id='msgNotificationContainer']//td[@class='ERROR'] *No fields*